# 個人情報の保護に関する法律 / Act on the Protection of Personal Information — 附　則 (Supplementary Provisions)

- Law: 個人情報の保護に関する法律 (Act on the Protection of Personal Information), 平成十五年法律第五十七号
- English title "Act on the Protection of Personal Information": Ministry of Justice translation
- Kind: Act — the distinction between 法律 (Act), 政令 (Cabinet Order), 省令 (Ministerial Order) and 条例 (local ordinance) decides who may issue it and what it may say.
- Provision: 附　則 (Supplementary Provisions) — address `suppl-4271-65`
- Text in force since: 2026-10-01
- URL (the page that opens at this provision): https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65
- Permanent URL (e-Gov law ID, never renamed): https://japanlaw.org/l/415AC0000000057/suppl-4271-65
- Every provision below carries its address and both URLs on the line under it.
- Japanese text: e-Gov 法令検索, Digital Agency (デジタル庁). English: as marked on each line below.

Only the Japanese as published by the government has legal effect; the text
below is a copy of it. Every English rendering below is a translation and
says which kind: the Ministry of Justice's translation, or this
site's machine translation, whose model and date the Sources list names.
They are never merged and never substituted for one another.

---

## 附　則 平成二七年九月九日法律第六五号
<sup>suppl-4271-65 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65</sup>

### 第一条（施行期日） — Effective Date
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1</sup>

**第一項**  この法律は、公布の日から起算して二年を超えない範囲内において政令で定める日から施行する。ただし、次の各号に掲げる規定は、当該各号に定める日から施行する。
<sup>suppl-4271-65/art-1/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1</sup>
This Act comes into effect as of the date specified by Cabinet Order within a period not exceeding 2 years from the date of promulgation; provided, however, that the provisions set forth in the following items come into effect as of the dates specified respectively in those items.
<sup>machine translation, not official</sup>

  **一**  附則第七条第二項、第十条及び第十二条の規定　公布の日
  <sup>suppl-4271-65/art-1/par-1/item-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-1</sup>
  The provisions of Article 7, paragraph (2), Article 10, and Article 12 of the Supplementary Provisions: the date of promulgation
  <sup>machine translation, not official</sup>

  **二**  第一条及び第四条並びに附則第五条、第六条、第七条第一項及び第三項、第八条、第九条、第十三条、第二十二条、第二十五条から第二十七条まで、第三十条、第三十二条、第三十四条並びに第三十七条の規定　平成二十八年一月一日
  <sup>suppl-4271-65/art-1/par-1/item-2 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-2</sup>
  The provisions of Article 1 and Article 4, and Article 5, Article 6, Article 7, paragraphs (1) and (3), Article 8, Article 9, Article 13, Article 22, Articles 25 through 27, Article 30, Article 32, Article 34, and Article 37 of the Supplementary Provisions: January 1, 2016
  <sup>machine translation, not official</sup>

  **三**  略
  <sup>suppl-4271-65/art-1/par-1/item-3 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-3 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-3</sup>
  Omitted
  <sup>machine translation, not official</sup>

  **四**  次条の規定　公布の日から起算して一年六月を超えない範囲内において政令で定める日
  <sup>suppl-4271-65/art-1/par-1/item-4 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-4 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-4</sup>
  The provisions of the following Article: the date specified by Cabinet Order within a period not exceeding one year and six months from the date of promulgation
  <sup>machine translation, not official</sup>

  **五**  第三条及び第六条（番号利用法第十九条第一号及び別表第一の改正規定を除く。）並びに附則第十九条の三、第二十四条、第二十九条の三及び第三十六条の規定　番号利用法附則第一条第五号に掲げる規定の施行の日
  <sup>suppl-4271-65/art-1/par-1/item-5 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-5 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-5</sup>
  The provisions of Article 3 and Article 6 (excluding the provision amending Article 19, item (i) and Appended Table 1 of the Number Use Act), and Article 19-3, Article 24, Article 29-3, and Article 36 of the Supplementary Provisions: the date of enforcement of the provisions listed in Article 1, item (v) of the Supplementary Provisions of the Number Use Act
  <sup>machine translation, not official</sup>

### 第二条（通知等に関する経過措置） — Transitional Measures Concerning Notification, etc.
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-2 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-2</sup>

**第一項**  第二条の規定による改正後の個人情報の保護に関する法律（以下「新個人情報保護法」という。）第二十三条第二項の規定により個人データを第三者に提供しようとする者は、この法律の施行の日（以下「施行日」という。）前においても、個人情報保護委員会規則で定めるところにより、同項第五号に掲げる事項に相当する事項について本人に通知するとともに、同項各号に掲げる事項に相当する事項について個人情報保護委員会に届け出ることができる。この場合において、当該通知及び届出は、施行日以後は、同項の規定による通知及び届出とみなす。
<sup>suppl-4271-65/art-2/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-2/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-2/par-1</sup>
A person that intends to provide personal data to a third party pursuant to the provisions of Article 23, paragraph (2) of the Act on the Protection of Personal Information as amended by Article 2 (hereinafter referred to as the "New Act on the Protection of Personal Information") may, even before the date on which this Act comes into effect (hereinafter referred to as "the Effective Date"), as provided by Order of the Personal Information Protection Commission, notify the identifiable person of matters equivalent to those set forth in item (v) of that paragraph and file a notification with the Personal Information Protection Commission of matters equivalent to those set forth in the items of that paragraph. In this case, that notice and notification are deemed, on or after the Effective Date, to be the notice and notification under the provisions of that paragraph.
<sup>machine translation, not official</sup>

### 第三条（外国にある第三者への提供に係る本人の同意に関する経過措置） — Transitional Measures Concerning the Consent of the Identifiable Person to Provision to a Third Party in a Foreign Country
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-3 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-3 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-3</sup>

**第一項**  施行日前になされた本人の個人情報の取扱いに関する同意がある場合において、その同意が新個人情報保護法第二十四条の規定による個人データの外国にある第三者への提供を認める旨の同意に相当するものであるときは、同条の同意があったものとみなす。
<sup>suppl-4271-65/art-3/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-3/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-3/par-1</sup>
If there is consent concerning the handling of personal information on the identifiable person that was given before the Effective Date, and that consent is equivalent to consent to the effect of permitting the provision of personal data to a third party in a foreign country under the provisions of Article 24 of the New Act on the Protection of Personal Information, the consent referred to in that Article is deemed to have been given.
<sup>machine translation, not official</sup>

### 第四条（主務大臣がした処分等に関する経過措置） — Transitional Measures Concerning Dispositions Made by the Competent Minister
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-4 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-4 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-4</sup>

**第一項**  施行日前に第二条の規定による改正前の個人情報の保護に関する法律（以下「旧個人情報保護法」という。）又はこれに基づく命令の規定により旧個人情報保護法第三十六条又は第四十九条に規定する主務大臣（以下この条において単に「主務大臣」という。）がした勧告、命令その他の処分又は通知その他の行為は、施行日以後は、新個人情報保護法又はこれに基づく命令の相当規定に基づいて、個人情報保護委員会がした勧告、命令その他の処分又は通知その他の行為とみなす。
<sup>suppl-4271-65/art-4/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-4/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-4/par-1</sup>
Recommendations, orders or other dispositions, or notices or other acts, made before the Effective Date, pursuant to the provisions of the Act on the Protection of Personal Information prior to its amendment by Article 2 (hereinafter referred to as the "Former Act on the Protection of Personal Information") or of orders based on it, by the competent minister prescribed in Article 36 or Article 49 of the Former Act on the Protection of Personal Information (hereinafter simply referred to as the "competent minister" in this Article) are deemed, on or after the Effective Date, to be recommendations, orders or other dispositions, or notices or other acts, made by the Personal Information Protection Commission pursuant to the corresponding provisions of the New Act on the Protection of Personal Information or of orders based on it.
<sup>machine translation, not official</sup>

**第二項**  この法律の施行の際現に旧個人情報保護法又はこれに基づく命令の規定により主務大臣に対してされている申請、届出その他の行為は、施行日以後は、新個人情報保護法又はこれに基づく命令の相当規定に基づいて、個人情報保護委員会に対してされた申請、届出その他の行為とみなす。
<sup>suppl-4271-65/art-4/par-2 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-4/par-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-4/par-2</sup>
Applications, notifications, or other acts that have actually been made to the competent minister at the time this Act comes into effect pursuant to the provisions of the Former Act on the Protection of Personal Information or of orders based on it are deemed, on or after the Effective Date, to be applications, notifications, or other acts made to the Personal Information Protection Commission pursuant to the corresponding provisions of the New Act on the Protection of Personal Information or of orders based on it.
<sup>machine translation, not official</sup>

**第三項**  施行日前に旧個人情報保護法又はこれに基づく命令の規定により主務大臣に対して届出その他の手続をしなければならない事項で、施行日前にその手続がされていないものについては、施行日以後は、これを、新個人情報保護法又はこれに基づく命令の相当規定により個人情報保護委員会に対してその手続をしなければならないとされた事項についてその手続がされていないものとみなして、当該相当規定を適用する。
<sup>suppl-4271-65/art-4/par-3 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-4/par-3 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-4/par-3</sup>
With regard to a matter for which a notification or other procedure must be carried out with the competent minister before the Effective Date pursuant to the provisions of the Former Act on the Protection of Personal Information or of orders based on it, and for which that procedure has not been carried out before the Effective Date, on or after the Effective Date, those corresponding provisions apply by deeming that matter to be a matter for which that procedure must be carried out with the Personal Information Protection Commission pursuant to the corresponding provisions of the New Act on the Protection of Personal Information or of orders based on it and for which that procedure has not been carried out.
<sup>machine translation, not official</sup>

### 第七条（委員長又は委員の任命等に関する経過措置） — Transitional Measures Concerning the Appointment of the Chairperson or Commissioners
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-7 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7</sup>

**第一項**  附則第一条第二号に掲げる規定の施行の際現に従前の特定個人情報保護委員会の委員長又は委員である者は、それぞれ第二号施行日に、第一条の規定による改正後の個人情報の保護に関する法律（以下この条において「第二号新個人情報保護法」という。）第五十四条第三項の規定により、個人情報保護委員会の委員長又は委員として任命されたものとみなす。この場合において、その任命されたものとみなされる者の任期は、第二号新個人情報保護法第五十五条第一項の規定にかかわらず、第二号施行日における従前の特定個人情報保護委員会の委員長又は委員としてのそれぞれの任期の残任期間と同一の期間とする。
<sup>suppl-4271-65/art-7/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-1</sup>
A person who is serving as the chairperson or a commissioner of the former Specific Personal Information Protection Commission at the time the provisions set forth in Article 1, item (ii) of the Supplementary Provisions come into effect is deemed to have been appointed, on the item (ii) Effective Date, as the chairperson or a commissioner, respectively, of the Personal Information Protection Commission pursuant to the provisions of Article 54, paragraph (3) of the Act on the Protection of Personal Information as amended by Article 1 (hereinafter referred to as the "item (ii) New Personal Information Protection Act" in this Article). In this case, notwithstanding the provisions of Article 55, paragraph (1) of the item (ii) New Personal Information Protection Act, the term of office of the person deemed to have been so appointed is to be a period equal to the respective remaining term of office of that person as the chairperson or a commissioner of the former Specific Personal Information Protection Commission as of the item (ii) Effective Date.
<sup>machine translation, not official</sup>

**第二項**  附則第一条第二号に掲げる規定の施行に伴い新たに任命されることとなる個人情報保護委員会の委員については、第二号新個人情報保護法第五十四条第三項に規定する委員の任命のために必要な行為は、第二号施行日前においても行うことができる。
<sup>suppl-4271-65/art-7/par-2 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-2</sup>
With regard to the commissioners of the Personal Information Protection Commission who are to be newly appointed upon the enforcement of the provisions set forth in Article 1, item (ii) of the Supplementary Provisions, acts necessary for the appointment of commissioners prescribed in Article 54, paragraph (3) of the item (ii) New Personal Information Protection Act may be carried out even before the item (ii) Effective Date.
<sup>machine translation, not official</sup>

**第三項**  附則第一条第二号に掲げる規定の施行の際現に従前の特定個人情報保護委員会の事務局の職員である者は、別に辞令を発せられない限り、第二号施行日に、同一の勤務条件をもって、個人情報保護委員会の事務局の相当の職員となるものとする。
<sup>suppl-4271-65/art-7/par-3 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-3 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-3</sup>
A person who is serving as a member of the secretarial staff of the former Specific Personal Information Protection Commission at the time the provisions set forth in Article 1, item (ii) of the Supplementary Provisions come into effect is to become a corresponding member of the secretarial staff of the Personal Information Protection Commission on the item (ii) Effective Date, under the same working conditions, unless otherwise notified by a letter of appointment.
<sup>machine translation, not official</sup>

### 第九条（罰則の適用に関する経過措置） — Transitional Measures Concerning the Application of Penal Provisions
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-9 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-9 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-9</sup>

**第一項**  この法律（附則第一条第二号に掲げる規定にあっては、当該規定）の施行前にした行為及び前条の規定によりなお従前の例によることとされる場合における第二号施行日以後にした行為に対する罰則の適用については、なお従前の例による。
<sup>suppl-4271-65/art-9/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-9/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-9/par-1</sup>
With regard to the application of penal provisions to acts committed before this Act (or, for the provisions set forth in Article 1, item (ii) of the Supplementary Provisions, those provisions) comes into effect and to acts committed on or after the item (ii) Effective Date in the cases where the provisions then in force continue to govern pursuant to the preceding Article, the provisions then in force continue to govern.
<sup>machine translation, not official</sup>

### 第十条（政令への委任） — Delegation to Cabinet Order
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-10 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-10 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-10</sup>

**第一項**  この附則に定めるもののほか、この法律の施行に関し必要な経過措置は、政令で定める。
<sup>suppl-4271-65/art-10/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-10/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-10/par-1</sup>
Beyond what is provided for in these Supplementary Provisions, transitional measures necessary for the enforcement of this Act are specified by Cabinet Order.
<sup>machine translation, not official</sup>

### 第十一条（事業者等が講ずべき措置の適切かつ有効な実施を図るための指針の策定に当たっての配慮） — Consideration in Formulating Guidelines to Ensure That Businesses, etc. Properly and Effectively Implement the Measures That They Are Required to Take
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-11 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-11 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-11</sup>

**第一項**  個人情報保護委員会は、新個人情報保護法第八条に規定する事業者等が講ずべき措置の適切かつ有効な実施を図るための指針を策定するに当たっては、この法律の施行により旧個人情報保護法第二条第三項第五号に掲げる者が新たに個人情報取扱事業者となることに鑑み、特に小規模の事業者の事業活動が円滑に行われるよう配慮するものとする。
<sup>suppl-4271-65/art-11/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-11/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-11/par-1</sup>
In formulating the guidelines prescribed in Article 8 of the New Act on the Protection of Personal Information to ensure that businesses, etc. properly and effectively implement the measures that they are required to take, the Personal Information Protection Commission is to give consideration so that the business activities of small-scale businesses in particular are carried out smoothly, in view of the fact that persons listed in Article 2, paragraph (3), item (v) of the Former Act on the Protection of Personal Information newly become businesses handling personal information upon the enforcement of this Act.
<sup>machine translation, not official</sup>

### 第十二条（検討） — Review
<sup>caption: machine translation, not official</sup>
<sup>suppl-4271-65/art-12 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12</sup>

**第一項**  政府は、施行日までに、新個人情報保護法の規定の趣旨を踏まえ、行政機関の保有する個人情報の保護に関する法律第二条第一項に規定する行政機関が保有する同条第二項に規定する個人情報及び独立行政法人等の保有する個人情報の保護に関する法律（平成十五年法律第五十九号）第二条第一項に規定する独立行政法人等が保有する同条第二項に規定する個人情報（以下この条において「行政機関等保有個人情報」と総称する。）の取扱いに関する規制の在り方について、匿名加工情報（新個人情報保護法第二条第九項に規定する匿名加工情報をいい、行政機関等匿名加工情報（行政機関等保有個人情報を加工して得られる匿名加工情報をいう。以下この項において同じ。）を含む。）の円滑かつ迅速な利用を促進する観点から、行政機関等匿名加工情報の取扱いに対する指導、助言等を統一的かつ横断的に個人情報保護委員会に行わせることを含めて検討を加え、その結果に基づいて所要の措置を講ずるものとする。
<sup>suppl-4271-65/art-12/par-1 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-1</sup>
By the Effective Date, the Government is to, in light of the purpose of the provisions of the New Act on the Protection of Personal Information, review how the handling of the personal information as set forth in Article 2, paragraph (2) of the Act on the Protection of Personal Information Held by Administrative Organs that is held by administrative organs as set forth in paragraph (1) of that Article and of the personal information as set forth in Article 2, paragraph (2) of the Act on the Protection of Personal Information Held by Incorporated Administrative Agencies, etc. (Act No. 59 of 2003) that is held by incorporated administrative agencies or other prescribed corporations as set forth in paragraph (1) of that Article (hereinafter collectively referred to as "personal information held by administrative organs, etc." in this Article) should be regulated, including having the Personal Information Protection Commission give guidance, advice, etc. in a unified and cross-cutting manner concerning the handling of anonymized personal information the administrative entity holds, from the perspective of promoting the smooth and prompt use of anonymized personal information (meaning anonymized personal information as set forth in Article 2, paragraph (9) of the New Act on the Protection of Personal Information, and including anonymized personal information the administrative entity holds (meaning anonymized personal information obtained by processing personal information held by administrative organs, etc.; the same applies hereinafter in this paragraph)), and take required measures based on the results.
<sup>machine translation, not official</sup>

**第二項**  政府は、この法律の施行後三年を目途として、個人情報の保護に関する基本方針の策定及び推進その他の個人情報保護委員会の所掌事務について、これを実効的に行うために必要な人的体制の整備、財源の確保その他の措置の状況を勘案し、その改善について検討を加え、必要があると認めるときは、その結果に基づいて所要の措置を講ずるものとする。
<sup>suppl-4271-65/art-12/par-2 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-2</sup>
The Government is to, around three years after this Act comes into effect, review the improvement of the formulation and promotion of the basic policy on the protection of personal information and the other functions under the jurisdiction of the Personal Information Protection Commission, taking into consideration the status of the development of the personnel structure, the securing of financial resources and other measures necessary to carry out those functions effectively, and, if it finds it necessary, take required measures based on the results.
<sup>machine translation, not official</sup>

**第三項**  政府は、前項に定める事項のほか、この法律の施行後三年を目途として、個人情報の保護に関する国際的動向、情報通信技術の進展、それに伴う個人情報を活用した新たな産業の創出及び発展の状況等を勘案し、新個人情報保護法の施行の状況について検討を加え、必要があると認めるときは、その結果に基づいて所要の措置を講ずるものとする。
<sup>suppl-4271-65/art-12/par-3 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-3 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-3</sup>
In addition to the matters provided for in the preceding paragraph, the Government is to, around three years after this Act comes into effect, review the status of the enforcement of the New Act on the Protection of Personal Information, taking into consideration international trends concerning the protection of personal information, the advancement of information and communications technology, the status of the creation and development of new industries utilizing personal information that accompany that advancement, etc., and, if it finds it necessary, take required measures based on the results.
<sup>machine translation, not official</sup>

**第四項**  政府は、附則第一条第六号に掲げる規定の施行後三年を目途として、預金保険法（昭和四十六年法律第三十四号）第二条第一項に規定する金融機関が同条第三項に規定する預金者等から、又は農水産業協同組合貯金保険法（昭和四十八年法律第五十三号）第二条第一項に規定する農水産業協同組合が同条第三項に規定する貯金者等から、適切に個人番号の提供を受ける方策及び第七条の規定による改正後の番号利用法の施行の状況について検討を加え、必要があると認めるときは、その結果に基づいて、国民の理解を得つつ、所要の措置を講ずるものとする。
<sup>suppl-4271-65/art-12/par-4 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-4 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-4</sup>
The Government is to, around three years after the provisions set forth in Article 1, item (vi) of the Supplementary Provisions come into effect, review measures for financial institutions as set forth in Article 2, paragraph (1) of the Deposit Insurance Act (Act No. 34 of 1971) to be appropriately provided with Individual Numbers by depositors, etc. as set forth in paragraph (3) of that Article, or for agricultural and fishery cooperatives as set forth in Article 2, paragraph (1) of the Agricultural and Fishery Cooperatives Savings Insurance Act (Act No. 53 of 1973) to be appropriately provided with Individual Numbers by savers, etc. as set forth in paragraph (3) of that Article, and the status of the enforcement of the Number Use Act as amended by Article 7, and, if it finds it necessary, take required measures based on the results while gaining citizens' understanding.
<sup>machine translation, not official</sup>

**第五項**  政府は、国の行政機関等が保有する個人情報の安全を確保する上でサイバーセキュリティ（サイバーセキュリティ基本法（平成二十六年法律第百四号）第二条に規定するサイバーセキュリティをいう。）に関する対策の的確な策定及び実施が重要であることに鑑み、国の行政機関等における同法第十三条に規定する基準に基づく対策の策定及び実施に係る体制の整備等について検討を加え、その結果に基づいて所要の措置を講ずるものとする。
<sup>suppl-4271-65/art-12/par-5 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-5 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-5</sup>
In view of the importance of the precise formulation and implementation of measures concerning cybersecurity (meaning cybersecurity as set forth in Article 2 of the Basic Act on Cybersecurity (Act No. 104 of 2014)) in ensuring the security of personal information held by national administrative entities, the Government is to review the development, etc. of systems for the formulation and implementation of measures at national administrative entities based on the standards set forth in Article 13 of that Act, and take required measures based on the results.
<sup>machine translation, not official</sup>

**第六項**  政府は、新個人情報保護法の施行の状況、第一項の措置の実施の状況その他の状況を踏まえ、新個人情報保護法第二条第一項に規定する個人情報及び行政機関等保有個人情報の保護に関する規定を集約し、一体的に規定することを含め、個人情報の保護に関する法制の在り方について検討するものとする。
<sup>suppl-4271-65/art-12/par-6 · https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-6 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-6</sup>
The Government is to, in light of the status of the enforcement of the New Act on the Protection of Personal Information, the status of the implementation of the measures referred to in paragraph (1), and other circumstances, review what the legal system concerning the protection of personal information should be, including consolidating the provisions concerning the protection of personal information as set forth in Article 2, paragraph (1) of the New Act on the Protection of Personal Information and of personal information held by administrative organs, etc., and providing for them in an integrated manner.
<sup>machine translation, not official</sup>

---

## Cites
- suppl-4271-65/art-1/par-1/item-1: 附則第七条第二項 → 個人情報の保護に関する法律 附則第七条第二項 (Supplementary Provisions, Article 7, paragraph (2)), suppl-4271-65/art-7/par-2 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-2
- suppl-4271-65/art-1/par-1/item-1: 第十条 → 個人情報の保護に関する法律 附則第十条 (Supplementary Provisions, Article 10), suppl-4271-65/art-10 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-10 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-10
- suppl-4271-65/art-1/par-1/item-1: 第十二条 → 個人情報の保護に関する法律 附則第十二条 (Supplementary Provisions, Article 12), suppl-4271-65/art-12 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12
- suppl-4271-65/art-1/par-1/item-2: 第七条第一項 → 個人情報の保護に関する法律 附則第七条第一項 (Supplementary Provisions, Article 7, paragraph (1)), suppl-4271-65/art-7/par-1 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-1
- suppl-4271-65/art-1/par-1/item-2: 第三項 → 個人情報の保護に関する法律 附則第七条第三項 (Supplementary Provisions, Article 7, paragraph (3)), suppl-4271-65/art-7/par-3 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-3 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-3
- suppl-4271-65/art-1/par-1/item-2: 第九条 → 個人情報の保護に関する法律 附則第九条 (Supplementary Provisions, Article 9), suppl-4271-65/art-9 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-9 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-9
- suppl-4271-65/art-1/par-1/item-4: 次条 → 個人情報の保護に関する法律 附則第二条 (Supplementary Provisions, Article 2), suppl-4271-65/art-2 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-2
- suppl-4271-65/art-2/par-1: 第二十三条第二項 → 個人情報の保護に関する法律 第二十七条第二項 (Article 27, paragraph (2)), art-27/par-2 — https://japanlaw.org/en/personal-information-protection-act/art-27/par-2 · https://japanlaw.org/l/415AC0000000057/art-27/par-2
- suppl-4271-65/art-2/par-1: 同項第五号 → 個人情報の保護に関する法律 第二十七条第二項第七号 (Article 27, paragraph (2), item (vii)), art-27/par-2/item-7 — https://japanlaw.org/en/personal-information-protection-act/art-27/par-2/item-7 · https://japanlaw.org/l/415AC0000000057/art-27/par-2/item-7
- suppl-4271-65/art-3/par-1: 新個人情報保護法第二十四条 → 個人情報の保護に関する法律 第二十八条 (Article 28), art-28 — https://japanlaw.org/en/personal-information-protection-act/art-28 · https://japanlaw.org/l/415AC0000000057/art-28
- suppl-4271-65/art-4/par-1: この条 → 個人情報の保護に関する法律 附則第四条 (Supplementary Provisions, Article 4), suppl-4271-65/art-4 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-4 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-4
- suppl-4271-65/art-7/par-1: 附則第一条第二号 → 個人情報の保護に関する法律 附則第一条第一項第二号 (Supplementary Provisions, Article 1, paragraph (1), item (ii)), suppl-4271-65/art-1/par-1/item-2 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-2
- suppl-4271-65/art-7/par-1: この条 → 個人情報の保護に関する法律 附則第七条 (Supplementary Provisions, Article 7), suppl-4271-65/art-7 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7
- suppl-4271-65/art-7/par-1: 第二号新個人情報保護法第五十五条第一項 → 個人情報の保護に関する法律 第五十六条第一項 (Article 56, paragraph (1)), art-56/par-1 — https://japanlaw.org/en/personal-information-protection-act/art-56/par-1 · https://japanlaw.org/l/415AC0000000057/art-56/par-1
- suppl-4271-65/art-7/par-2: 附則第一条第二号 → 個人情報の保護に関する法律 附則第一条第一項第二号 (Supplementary Provisions, Article 1, paragraph (1), item (ii)), suppl-4271-65/art-1/par-1/item-2 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-2
- suppl-4271-65/art-7/par-3: 附則第一条第二号 → 個人情報の保護に関する法律 附則第一条第一項第二号 (Supplementary Provisions, Article 1, paragraph (1), item (ii)), suppl-4271-65/art-1/par-1/item-2 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-2
- suppl-4271-65/art-9/par-1: 附則第一条第二号 → 個人情報の保護に関する法律 附則第一条第一項第二号 (Supplementary Provisions, Article 1, paragraph (1), item (ii)), suppl-4271-65/art-1/par-1/item-2 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-2
- suppl-4271-65/art-11/par-1: 新個人情報保護法第八条 → 個人情報の保護に関する法律 第九条 (Article 9), art-9 — https://japanlaw.org/en/personal-information-protection-act/art-9 · https://japanlaw.org/l/415AC0000000057/art-9
- suppl-4271-65/art-12/par-1: 行政機関の保有する個人情報の保護に関する法律第二条第一項 → e-Gov law 415AC0000000058, 第二条第一項 (Article 2, paragraph (1)), art-2/par-1 — not held in this collection
- suppl-4271-65/art-12/par-1: 同条第二項 → e-Gov law 415AC0000000058, 第二条第二項 (Article 2, paragraph (2)), art-2/par-2 — not held in this collection
- suppl-4271-65/art-12/par-1: 独立行政法人等の保有する個人情報の保護に関する法律（平成十五年法律第五十九号）第二条第一項 → e-Gov law 415AC0000000059, 第二条第一項 (Article 2, paragraph (1)), art-2/par-1 — not held in this collection
- suppl-4271-65/art-12/par-1: 同条第二項 → e-Gov law 415AC0000000059, 第二条第二項 (Article 2, paragraph (2)), art-2/par-2 — not held in this collection
- suppl-4271-65/art-12/par-1: この条 → 個人情報の保護に関する法律 附則第十二条 (Supplementary Provisions, Article 12), suppl-4271-65/art-12 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12
- suppl-4271-65/art-12/par-1: 新個人情報保護法第二条第九項 → 個人情報の保護に関する法律 第二条第六項 (Article 2, paragraph (6)), art-2/par-6 — https://japanlaw.org/en/personal-information-protection-act/art-2/par-6 · https://japanlaw.org/l/415AC0000000057/art-2/par-6
- suppl-4271-65/art-12/par-1: この項 → 個人情報の保護に関する法律 附則第十二条第一項 (Supplementary Provisions, Article 12, paragraph (1)), suppl-4271-65/art-12/par-1 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-1
- suppl-4271-65/art-12/par-3: 前項 → 個人情報の保護に関する法律 附則第十二条第二項 (Supplementary Provisions, Article 12, paragraph (2)), suppl-4271-65/art-12/par-2 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-2
- suppl-4271-65/art-12/par-4: 預金保険法（昭和四十六年法律第三十四号）第二条第一項 → e-Gov law 346AC0000000034, 第二条第一項 (Article 2, paragraph (1)), art-2/par-1 — not held in this collection
- suppl-4271-65/art-12/par-4: 同条第三項 → e-Gov law 346AC0000000034, 第二条第三項 (Article 2, paragraph (3)), art-2/par-3 — not held in this collection
- suppl-4271-65/art-12/par-4: 農水産業協同組合貯金保険法（昭和四十八年法律第五十三号）第二条第一項 → e-Gov law 348AC0000000053, 第二条第一項 (Article 2, paragraph (1)), art-2/par-1 — not held in this collection
- suppl-4271-65/art-12/par-4: 同条第三項 → e-Gov law 348AC0000000053, 第二条第三項 (Article 2, paragraph (3)), art-2/par-3 — not held in this collection
- suppl-4271-65/art-12/par-5: サイバーセキュリティ基本法（平成二十六年法律第百四号）第二条 → e-Gov law 426AC1000000104, 第二条 (Article 2), art-2 — not held in this collection
- suppl-4271-65/art-12/par-5: 同法第十三条 → e-Gov law 426AC1000000104, 第十三条 (Article 13), art-13 — not held in this collection
- suppl-4271-65/art-12/par-6: 第一項 → 個人情報の保護に関する法律 附則第十二条第一項 (Supplementary Provisions, Article 12, paragraph (1)), suppl-4271-65/art-12/par-1 — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-1
- suppl-4271-65/art-12/par-6: 新個人情報保護法第二条第一項 → 個人情報の保護に関する法律 第二条第一項 (Article 2, paragraph (1)), art-2/par-1 — https://japanlaw.org/en/personal-information-protection-act/art-2/par-1 · https://japanlaw.org/l/415AC0000000057/art-2/par-1

## Cited by

11 provisions cite this one. No official source publishes this direction.

- 個人情報の保護に関する法律 附則第一条第一項第一号（施行期日） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-1
- 個人情報の保護に関する法律 附則第一条第一項第二号（施行期日） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-2
- 個人情報の保護に関する法律 附則第一条第一項第四号（施行期日） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-1/par-1/item-4 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-1/par-1/item-4
- 個人情報の保護に関する法律 附則第四条第一項（主務大臣がした処分等に関する経過措置） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-4/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-4/par-1
- 個人情報の保護に関する法律 附則第七条第一項（委員長又は委員の任命等に関する経過措置） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-1
- 個人情報の保護に関する法律 附則第七条第二項（委員長又は委員の任命等に関する経過措置） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-2 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-2
- 個人情報の保護に関する法律 附則第七条第三項（委員長又は委員の任命等に関する経過措置） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-7/par-3 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-7/par-3
- 個人情報の保護に関する法律 附則第九条第一項（罰則の適用に関する経過措置） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-9/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-9/par-1
- 個人情報の保護に関する法律 附則第十二条第一項（検討） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-1 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-1
- 個人情報の保護に関する法律 附則第十二条第三項（検討） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-3 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-3
- 個人情報の保護に関する法律 附則第十二条第六項（検討） — https://japanlaw.org/en/personal-information-protection-act/suppl-4271-65/art-12/par-6 · https://japanlaw.org/l/415AC0000000057/suppl-4271-65/art-12/par-6

---

## Sources

- e-Gov 法令検索, Digital Agency (デジタル庁) — 個人情報の保護に関する法律 — the text in force from 2026-10-01 (https://laws.e-gov.go.jp/law/415AC0000000057/20261001_507AC0000000070), retrieved 2026-10-10
- Japanese Law Translation Database System, Ministry of Justice (法務省) — Act on the Protection of Personal Information — Ministry of Justice translation (https://www.japaneselawtranslation.go.jp/en/laws/view/4241/tb), retrieved 2026-10-10
- claude-opus-5-5 — Machine translation, batch personal-information-protection-act-20261010T184447-001, translated 2026-10-11
- claude-opus-5-5 — Machine translation, batch personal-information-protection-act-20261010T184447-002, translated 2026-10-11
- claude-opus-5-5 — Machine translation, batch personal-information-protection-act-20261010T191025-001, translated 2026-10-11
- This site's parser, version 190 — 個人情報の保護に関する法律 — structure, counts, cross-references and defined terms, computed 2026-10-10
